You are using an older browser version. Please use a supported version for the best MSN experience.

If you shopped at these 13 stores in the last year, your data might have been stolen

Business Insider logo Business Insider 4/7/2018 Dennis Green

Sonic© Provided by Business Insider Sonic

At least ten separate security breaches occurred from January 2017 until now. Many of them were caused by flaws in payment systems, either online or in stores.

Data breaches are on the rise in both retailers and other businesses. According to Business Insider Intelligence, data breaches are a real danger for both brands and customers, and can affect customer's trust in brands.

According to a study by KPMG, 19% consumers would completely stop shopping at a retailer after a breach, and 33% would take a break from shopping there for a extended period.

(Click ahead)


a sign above a store© Provided by Business Insider

Sears alerted customers on April 4 of a "security incident" with an online support partner [ 24] that may have resulted in up to 100,000 people having their credit card information stolen.

The incident affected shoppers who bought items online from September 27, 2017 to October 12, 2017


a car parked in a parking lot© Provided by Business Insider

Kmart, which is owned by Sears Holdings, was also affected by the breach the company reported on April 4.


a group of people standing next to a sign© Provided by Business Insider

Delta used the same online support service as Sears, and was also affected by the reported breach.

The airline said customer payment information may have been vulnerable, but did not estimate how many of its customers were affected.

Saks Fifth Avenue

a group of people standing next to a person© Provided by Business Insider

Hudson's Bay, the parent company of Saks Fifth Ave, confirmed in April that a data breach compromised payment systems and therefore customers' credit and debit cards.

Estimates of the amount of affected customers have not yet been released, but could number in the millions. Online customers were not affected.

Lord & Taylor

a group of people standing in a room© Provided by Business Insider

Hudson's Bay also owns Lord & Taylor, and those stores were also affected by the breach.

Under Armour

a person standing in a cage© Provided by Business Insider

Under Armour confirmed in March that data from its MyFitnessPal app was accessed by an "unauthorized party."

Payment information was not released, but the app is used to track weight loss and information pertaining to that likely leaked. More than 150 million people's information was likely compromised.

Panera Bread

a plate of food on a table© Provided by Business Insider

Panera Bread confirmed on April 2 that it was notified of a data leak on its website. 

Personal information, including names, addresses, and partial credit card numbers may have leaked, though the company says the investigation is ongoing.

The flaw in the website was fixed as of Monday, but up to 37 million people's information could have been leaked according to an estimate.

Forever 21

a group of people standing in a room© Provided by Business Insider

Forever 21 alerted its customers in November that some of their information may have been stolen.

A flaw in the store's cashier terminals may have inadvertently exposed data like credit card numbers, expiration dates, and internal verification codes to hackers. Customers who shopped in stores from March through October 2017 are vulnerable.


a tray of food on a table© Provided by Business Insider

Sonic told Business Insider in September that it detected "unusual security regarding credit cards being used at Sonic."

Credit cards from 5 million customers may have been stolen, as most of the chains more than 3,600 locations use the same payment system.

Whole Foods

a person standing in front of a store filled with lots of food© Provided by Business Insider

Whole Foods announced in August that it "recently received information regarding unauthorized access of payment card information."

A flaw in the point-of-sale system used by the chain's taprooms and table-service restaurants was affected, but not the system the grocery store itself uses.


a person standing in front of a store© Provided by Business Insider

Kmart confirmed in June that credit card information was stolen from shoppers who came into its stores.

The store did not confirm how or when the data was stolen.


a group of people standing in front of a store© Provided by Business Insider

Gamestop confirmed a data breach in April 2017. Customers who shopped online for a six-month period are vulnerable, from August 10, 2016 to February 9, 2017.

Names, addresses, and credit card information were all taken in a breach of the website's payments processor.


a large red chair in a restaurant© Provided by Business Insider

Arby's confirmed in February 2017 a data breach may have affected 355,000 credit and debit cards used at its stores.

Malware in the chain's cashier systems between October 25, 2016 and January 19, 2017 allowed the unauthorized access. 


More from Business Insider

Business Insider
Business Insider
image beaconimage beaconimage beacon